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Wireless Terminal Reference Architecture 
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FIGURE 2. 



Wireless Single User Computer Side Reference Architecture (PC or Server Access) 
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FIGURE 3. 



Wireless Multiple User Computer Side Reference Architecture (Server or Mainframe Access) 
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FIGURE 4. 



Wireless Security Model Reference Architecture 




Wireless access point 
encrypts data with a 
streaming cipher such as 
Secure Socket Layer. 





Wireless access point 
broadcasts encrypted data 
over a wireless channel. 



No cleartext data or encryption 
. key is transmitted. 



Wireless terminal 
receives and 
decrypts data. 




Wireless terminal 
multiplexes input signals 
from user, encrypts data, 
and broadcasts data to 
access point. 



No cleartext data or encryption 
\key is transmitted. 



Wireless access 
point receives input, 
decrypts data, and 
sends signals to 
comouter. 



FIGURE 5. 



Wireless Carrier Security Model Reference Architecture for External Network Communication 



Wireless device 
encrypts voice 
or data with a 
predefined key. 



Wireless device sends 
voice or data to a carrier 
such as a wireless 
Internet service provider 
or cellular carrier 




Response voice or 
data is received 
from external 
network in an 
insecure format. 



Voice or data is encrypted 
using the predefined key 
by Wireless ISP or cellular 
carrier. 



No cleartext data or encryption 
key is transmitted. 



Voice or data is 
transmitted to 
wireless device and 
decrypted using 
predefined key. 



FIGURE 6. 



Wireless Carrier Security Model Reference Architecture for Internal Network Communication 



Wireless device sends 
voice or data to a carrier 
such as a wireless 
Internet service provider 
or cellular carrier. 




Wireless ISP or cellular 




carrier sends voice or 




data to receiving 


) < 


wireless device on the 




same network. 





Response voice or 
data is received by a 
wireless device on 
the same network. 



Voice or data is 
decrypted on the 
wireless device using 
the predefined key. 



FIGURE 7. 



Wireless Carrier Security Model Reference Architecture for Internal Network Communication 



Wireless device for 
initiator requests 
secure communication 
from the wireless ISP 
or cellular carrier. 



Wireless Internet service 
provider or cellular carrier 
generates a session key, 
encrypts it with a 
predefined key, and 
transmits it to the initiator 
and the responder. 




Responded s wireless 
device uses the session 
to encrypt response and 
transmit the voice or data 
to the initiator. 



No cleartext data or encryption 
key is transmitted. 



Voice or data is 
decrypted on the 
wireless device using 
the session key. 




Response voice or 
data is received by a 
wireless device on 
the same network. 
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Wireless Terminal Casing Reference Architecture 
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FIGURE 9. 



Wireless Tracking Mechanism for Wireless Devices and other Items 



Tracking mechanism 
gets GPS coordinates 
from GPS satellite or 
cellular carrier 
triangulation mechanism. 




Tracking mechanism sends 
SMS or GPRS message 
over a GSM, CDMA, or 
TDMA network to a data 
warehousing facility. 



Tracking mechanism 
creates an SMS or GPRS 
version of the 
coordinates. 



Reports are generated to 
show a historical audit trail 
of the previous and current 
location of the item being 
tracked. 



FIGURE 10, 

Setup and Operation of the Wireless Tracking Mechanism 




Account using the 
unique identifier of the 
tracking mechanism is 
established with a 
cellular carrier. 



Tracking mechanism is 
set up to obtain GPS 
coordinates and 
broadcast the coordinates 
via SMS or GPRS to a 
cellular carrier on a 
scheduled interval. 



SMS or GPRS messages 
are received by the cellular 
carrier and routed to a data 
warehousing facility. 




Data warehousing facility 
parses the SMS or GPRS 
message and stores the 
GPS coordinates. 




User accesses the GPS 
historical audit trail or real- 
time coordinates of the item 
being tracked via an Internet 
accessible location such as a 
website. 



